Red Hat Security Advisory

RHSA-2026:41130

Red Hat Hardened Images RPMs Security Update

Released 2026-07-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images busybox-1:1.37.0-8.1.hum1@aarch64, busybox-1:1.37.0-8.1.hum1@src, busybox-1:1.37.0-8.1.hum1@x86_64 +4

Fixes 2 records

TI-2026-28204 CVE-2026-38754 · GHSA-jj7c-h3wm-vjfw

Out-of-bounds read in BusyBox

LOW 38

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00235 Published 2026-07-15 Fixed CWE-125

TI-2026-28203 CVE-2026-38753 · GHSA-9r55-p3jw-v652

Use after free in BusyBox

LOW 38

A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00145 Published 2026-07-15 Partial fix CWE-416